As Augmentt releases new functionality, the set of Microsoft Entra roles required on each GDAP relationship can grow. When that happens, relationships created earlier may show as missing one or more roles in the GDAP audit — even though nothing changed on your side.

You don't need to delete or recreate anything. To fix it:

In Augmentt, go to Configuration > Integrations
Select the M365 CSP Tenant
Click Manage CSP Setup.
For each affected tenant, use the + button to generate a new GDAP relationship link and approve it while signed in to the customer tenant.
Once approved, select the tenants and click Delegate Access to assign the AdminAgents security group.

The GDAP audit in Augmentt will always show you exactly which roles are missing. Relationships that grant Global Administrator are not affected by this check.

Related symptom: if a feature fails with a permissions error such as "User is not authorized to perform this operation", a missing role on that tenant's GDAP relationship is the usual cause.

Microsoft 365 CSP Integration FAQ's